| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkinsci.plugins:pipeline-reporter-by-redpen | ≤ 1.054 | |
| redpen - pipeline reporter for jira | ≤ 1.054.v7b_9517b_6b_202 |
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspace directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free